Differential Timeouts with like IdPs?

[Michael Gettes]

Scott,

Thank you so much for the response and consideration.  RFE filed as requested.

/mrg

> On Jan 29, 2020, at 11:05 AM, Cantor, Scott <cantor.2 at osu.edu> wrote:
> 
> [External Email]
> 
> On 1/29/20, 10:54 AM, "users on behalf of Michael Gettes" <users-bounces at shibboleth.net on behalf of gettes at ufl.edu> wrote:
> 
>> Yesterday I spent several hours with InfoSec policy folk going through 800-63 (yet again, you know how I love 800-63
>> and friends) and other OMB documents and this is the conclusion we all reached.  We can address non web issues with
>> AD GPOs for users and lockout timeouts and so on - but it’s the web context that’s a bit alluding and Shib seems well
>> positioned (with code changes as you suggest) to be able to help solve, if not solve, the issues.
> 
> Screen saver locks prevent all application access, not just web or non-web, so I'm not sure why it's one or the other. It's the shared machine case where the problems come up, in which case it's best to talk about *that* problem, and not the general one.
> 
> Anyway, the way to get it implemented is filing an RFE for it. It's really too big a change for this version this late, so it needs to get tracked so it doesn't get forgotten.
> 
> -- Scott
> 
> 
> --
> For Consortium Member technical support, see https://urldefense.proofpoint.com/v2/url?u=https-3A__wiki.shibboleth.net_confluence_x_coFAAg&d=DwIGaQ&c=sJ6xIWYx-zLMB3EPkvcnVg&r=wEQWI9G4vDvpfmhpuO6yww&m=m_5RGWmjccC_ZV8_QAlLsFIw56--f-6sui8UxSlkw24&s=IGXiYf0THh6RwbqzgSUht3i4hm_ciCNApHMO4MODJgg&e=
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net